Test ID:	1.3.6.1.4.1.25623.1.0.800759
Category:	Web application abuses
Title:	HP/HPE System Management Homepage (SMH) 'RedirectUrl' URI Redirection Vulnerability (HPSBMA02583)
Summary:	HP/HPE System Management Homepage (SMH) is prone to a URL; redirection vulnerability.
Description:	Summary: HP/HPE System Management Homepage (SMH) is prone to a URL redirection vulnerability. Vulnerability Insight: Input data passed to the 'RedirectUrl' parameter in 'red2301.html' is not being properly validated. Vulnerability Impact: Successful exploitation will allow remote attackers to redirect to his choice of malicious site via the trusted vulnerable SMH url or aid in phishing attacks. Affected Software/OS: HP/HPE SMH version 2.x. Solution: Update to version 6.2 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1586 BugTraq ID: 39676 http://www.securityfocus.com/bid/39676 http://yehg.net/lab/pr0js/advisories/hp_system_management_homepage_url_redirection_abuse XForce ISS Database: hp-smh-redirecturl-phishing(58107) https://exchange.xforce.ibmcloud.com/vulnerabilities/58107
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.